CVE-2024-28161

Name of the Vulnerable Software and Affected Versions Jenkins Delphix Plugin version 3.0.1

Description The issue concerns a global option in the Jenkins Delphix Plugin that allows administrators to enable or disable SSL/TLS certificate validation for Data Control Tower (DCT) connections. This option is disabled by default.

Recommendations For Jenkins Delphix Plugin version 3.0.1, consider enabling the global option for SSL/TLS certificate validation to enhance the security of Data Control Tower connections. As a temporary workaround, restrict the use of DCT connections until a more permanent solution is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.